This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft File: eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft (raw, json) Hash identifier: xrCm1zMR6WwjUz9NRuIwUvJ8vVfAtLlh4XHvl3CwgoM= Subject key identifier: 9C:26:6F:CC:B1:5B:A2:5A:F7:54:30:C7:DB:58:D9:CF:79:8A:D0:92 Authority key identifier: 78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63 Certificate issuer: /CN=787aac71f17ef033cb6536795338fdc7bc0f2263 Certificate serial: 019AF208C714627E6963647296A5E94D501A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft Manifest number: 14A2 Signing time: Sat 06 Dec 2025 05:00:52 +0000 Manifest this update: Sat 06 Dec 2025 05:00:52 +0000 Manifest next update: Sun 07 Dec 2025 05:00:52 +0000 Files and hashes: 1: eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl (hash: N8TiIFTPKMdIYEbdprC1i71ndqQJDxa4/xnQxh5c5pA=) 2: vchHJIw7jZ4Wv-xZM5fwqPOc5MI.roa (hash: FaIi1AdW4pumZbm44kEE9unKxXXirWba//1QTHPOeME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c7:14:62:7e:69:63:64:72:96:a5:e9:4d:50:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=787aac71f17ef033cb6536795338fdc7bc0f2263 Validity Not Before: Dec 6 05:00:52 2025 GMT Not After : Dec 7 05:00:52 2025 GMT Subject: CN=9c266fccb15ba25af75430c7db58d9cf798ad092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:18:9c:b4:63:74:c9:1f:31:3f:5f:cd:d2:c5: 61:30:af:a0:13:9f:68:b2:d6:a5:f9:6b:13:fa:27: 72:54:d5:ce:f2:9d:87:36:ca:78:cc:27:2d:17:37: e6:2d:d1:44:b5:80:09:b6:fe:07:cb:8b:f4:43:82: e2:cb:67:41:61:79:53:d9:08:f4:30:82:23:e9:10: 96:ad:5f:62:9f:f1:ef:20:4b:b2:05:70:19:ee:32: 5d:a7:10:78:7d:4f:1c:fe:5c:e8:b0:0e:b3:da:ac: c3:45:9c:16:08:bb:e3:2b:a7:de:3c:6f:64:d5:2e: 56:3b:ba:e6:a3:a0:9c:52:09:98:68:5c:72:b5:84: 52:f2:3d:4a:f0:4e:d1:7a:36:14:e8:86:01:50:41: f5:7d:5f:f0:6c:4c:cc:81:d1:ee:f5:db:62:45:cb: 66:9b:bd:3c:12:f3:59:a5:90:cb:df:76:61:bc:98: 37:f2:1f:f1:12:6a:c5:1a:1f:17:23:53:95:01:75: 0a:43:dd:fa:b4:0b:1e:76:9e:7a:9a:96:01:02:79: ec:b1:d4:e0:64:ab:17:34:4e:8e:58:b4:de:8f:0c: 36:36:6b:fb:02:93:4d:c8:3f:6f:8c:63:e7:18:f0: bf:e9:40:a6:61:a1:18:9f:c1:0f:7f:67:f4:eb:9f: c4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:26:6F:CC:B1:5B:A2:5A:F7:54:30:C7:DB:58:D9:CF:79:8A:D0:92 X509v3 Authority Key Identifier: keyid:78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d7:67:ef:0e:87:3e:13:3a:f9:54:f8:15:60:3e:51:d0:71: e4:48:00:4b:30:f9:ff:c8:74:a6:23:a9:c2:44:87:4e:e8:4f: fa:82:89:d0:40:2b:de:80:0d:6e:fa:52:33:bb:09:51:f9:a4: f9:1e:02:fa:8f:d9:cd:42:4a:16:41:73:f6:e7:50:6e:5e:78: 2b:47:8a:41:ba:f0:45:1f:04:d2:dd:72:8a:25:6f:7b:00:79: 5f:d2:07:bd:ad:8a:d5:d4:af:24:c9:86:5f:ce:11:c4:e6:0b: 6b:0d:8c:17:3a:d4:6b:65:7d:ab:9a:5d:ac:1d:19:37:44:df: 7a:f1:f0:c4:7d:0b:05:96:b8:07:25:4e:96:88:a7:8d:de:ab: 8a:b1:f1:eb:6c:98:f3:9d:f5:7a:bd:77:26:a5:38:d7:f5:c4: 40:dc:e4:90:e8:1d:34:b3:54:6d:a2:23:87:76:51:f5:05:24: 63:38:f4:cc:e3:de:2c:0a:d6:a1:15:26:ed:0b:c4:fb:90:31: 6b:54:27:79:f2:33:cd:8c:50:f1:6b:11:ab:0a:45:e2:b1:b6: c1:78:cb:a0:34:45:72:8f:1c:ed:64:b5:04:9c:b1:1d:ad:6c: d0:99:85:49:67:ca:b6:78:b2:6a:91:69:b4:e8:eb:d1:ac:8b: d6:a6:b8:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMcUYn5pY2RylqXpTVAaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4N2FhYzcxZjE3ZWYwMzNjYjY1MzY3OTUzMzhmZGM3YmMw ZjIyNjMwHhcNMjUxMjA2MDUwMDUyWhcNMjUxMjA3MDUwMDUyWjAzMTEwLwYDVQQD Eyg5YzI2NmZjY2IxNWJhMjVhZjc1NDMwYzdkYjU4ZDljZjc5OGFkMDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhictGN0yR8xP1/N0sVhMK+gE59o stal+WsT+idyVNXO8p2HNsp4zCctFzfmLdFEtYAJtv4Hy4v0Q4Liy2dBYXlT2Qj0 MIIj6RCWrV9in/HvIEuyBXAZ7jJdpxB4fU8c/lzosA6z2qzDRZwWCLvjK6fePG9k 1S5WO7rmo6CcUgmYaFxytYRS8j1K8E7RejYU6IYBUEH1fV/wbEzMgdHu9dtiRctm m708EvNZpZDL33ZhvJg38h/xEmrFGh8XI1OVAXUKQ936tAsedp56mpYBAnnssdTg ZKsXNE6OWLTejww2Nmv7ApNNyD9vjGPnGPC/6UCmYaEYn8EPf2f065/EywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwmb8yxW6Ja91Qwx9tY2c95itCSMB8GA1UdIwQY MBaAFHh6rHHxfvAzy2U2eVM4/ce8DyJjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUhxc2NmRi04RFBMWlRaNVV6ajl4N3dQSW1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy84NWRkYWUtNTRhNy00ZTdiLTk2ZGEt ZDEyODY3YjQ2NzMzLzEvZUhxc2NmRi04RFBMWlRaNVV6ajl4N3dQSW1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy84NWRkYWUtNTRhNy00ZTdiLTk2ZGEtZDEyODY3YjQ2NzMz LzEvZUhxc2NmRi04RFBMWlRaNVV6ajl4N3dQSW1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATddn7w6H PhM6+VT4FWA+UdBx5EgASzD5/8h0piOpwkSHTuhP+oKJ0EAr3oANbvpSM7sJUfmk +R4C+o/ZzUJKFkFz9udQbl54K0eKQbrwRR8E0t1yiiVvewB5X9IHva2K1dSvJMmG X84RxOYLaw2MFzrUa2V9q5pdrB0ZN0TfevHwxH0LBZa4ByVOloinjd6rirHx62yY 8531er13JqU41/XEQNzkkOgdNLNUbaIjh3ZR9QUkYzj0zOPeLArWoRUm7QvE+5Ax a1QnefIzzYxQ8WsRqwpF4rG2wXjLoDRFco8c7WS1BJyxHa1s0JmFSWfKtniyapFp tOjr0ayL1qa4sw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:05 2025 by rpki-client